EIDSCA.CP03 - Default Settings - Consent Policy Settings - Block user consent for risky apps.

Overview

Defines whether user consent will be blocked when a risky request is detected

Configure risk-based step-up consent - Microsoft Entra ID - Microsoft Learn

Test script

https://graph.microsoft.com/beta/settings
.values -eq 'true'

Related links

• Open in Graph Explorer
• directorySetting resource type - Microsoft Graph beta | Microsoft Learn

Test Metadata

Field	Value
Test ID	EIDSCA.CP03
Severity	High
Suite	Entra ID SCA
Category	General
PowerShell test	Test-MtEidscaCP03
Tags	EIDSCA, EIDSCA.CP03

Source

• Pester test: tests/EIDSCA/Test-EIDSCA.Generated.Tests.ps1
• PowerShell source: powershell/internal/eidsca/Test-MtEidscaCP03.ps1